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Top Stories 

• A severe ice and snow storm across the southeast part of the country caused more than 
729,000 customers to lose power, over 4,100 flight cancellations, dozens of school districts 
to cancel classes, and government offices to close February 13. - CNN (See item 1 ) 

• A major natural gas pipeline explosion in Adair County, Kentucky, February 13 destroyed 
homes and cars and left at least one person injured while prompting an evacuation of 
nearby areas. - Reuters (See item 2 ) 

• General Motors announced a recall of 619,122 model year 2005-2007 Chevrolet Cobalt 
and model year 2007 Pontiac G5 vehicles in the U.S. due to an issue with the ignition 
linked to 22 crashes and 6 fatalities. - USA Today (See item 7 ) 

• Police arrested 5 individuals February 6 in connection with operating a pill mill out of a 
clinic in California's San Fernando Valley that sold more than $5 million in medication. - 
Ventura County Star (See item 18 ) 

• The National Institute of Standards and Technology February 12 released its Framework 
for Improving Critical Infrastructure Security, a document which outlines cybersecurity 
practices and standards for critical infrastructure. - Threatpost (See item 25 ) 
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Energy Sector 

1. February 13, CNN - (National) Ice storm wallops southeast, stranding drivers, 
cutting power. A severe ice and snow storm across the southeast part of the country 
caused more than 729,000 customers to lose power, over 4,100 flight cancellations, 
dozens of school districts to cancel classes, and government offices to close February 
13. 

Source: http://www.cnn.com/2014/02/12/us/winter- 
weather/index.html?hpt=hp tl&nbd=5 things 

2. February 13, Reuters - (Kentucky) Blast rocks Kentucky natural gas pipeline amid 
storm. A major natural gas pipeline explosion in Adair County, Kentucky, February 13 
destroyed homes and cars and left at least one person injured while prompting an 
evacuation of nearby areas. NiSource Inc., announced it shut down part of its Columbia 
Gulf Transmission interstate pipeline as a result of the explosion after operating teams 
detected a drop in pressure and found the pipeline ruptured. 

Source: http://kdal610.com/news/articles/2014/feb/13/one-iniured-homes-ablaze-after- 
kentucky- gas -line -explosion/ 

3. February 12, Forum of F argo-Moorhead - (North Dakota) Brine flows into tributary, 
but State says spill contained. RIM Operating Inc., reported that 10,500 gallons of 
produced saltwater was released from its McKenzie County oil field site and reached a 
tributary of Lonesome Creek. The North Dakota Department of Health stated that the 
spill was contained and no public water supplies were threatened. 

Source: http://www.prairiebizmag.com/event/article/id/17803/ 

4. February 12, Associated Press - (North Dakota) Officials: 2 oil spills reported in 
western ND. The North Dakota Department of Health stated that two oil spills were 
reported in the State, with one at a well site near Williston where nearly 300 barrels of 
crude oil was released, and a second near Waterford City where about 35 barrels were 
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released. Approximately 20 barrels of the Waterford City spill and 295 barrels of the 
Williston spill were recovered. 

Source: http://www.newstimes.com/news/science/article/Officials-2-oil-spills-reported- 
in-westem-ND-5229480.php 

5. February 12, Hartford Courant - (Connecticut) Firefighters battle blaze at Kleen 
Energy Plant in Middletown. Firefighters responded to a fire February 12 at Turbine 
1 at the Kleen Energy power plant in Middletown, Connecticut, where as much as 
1,000 gallons of oil leaked. The fire was reportedly fueled by oil that is used to cool the 
turbine and was ignited by heat in the area. 

Source: http://www.courant.com/news/connecticut/hc-middletown-kleen-energy-fire- 
02 1 3-201402 1 2,0,721 6683,full. story 

6. February 12, KTVU 2 Oakland - (California) Tesoro refinery workers suffer minor 
injuries in acid spill. Two Tesoro workers were treated and released after they were 
splashed with sulfuric acid while working in one of the Martinez, California refinery’s 
gasoline production units February 12. The company shut down the unit while 
authorities investigated the incident. 

Source: http://www.ktvu.com/news/news/local/tesoro-refinery-workers-splashed- 
acid/ndL8G/ 

For another story, see item 35 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

7. February 13, USA Today - (National) 6 killed in GM cars with worn ignition 
switches. General Motors announced a recall of 619,122 model year 2005-2007 
Chevrolet Cobalt and model year 2007 Pontiac G5 vehicles in the U.S. due to an issue 
with the ignition where a heavy keyring or jarring can cause the ignition to switch off. 
The company is aware of 22 crashes and 6 fatalities related to the issue which can 
cause loss of power and a lack of airbag deployment. 

Source: http://www.usatodav.com/storv/money/cars/2014/02/13/gm-recall/5448319/ 



-3 - 



For another story, see item 11 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

8. February 12, Kirkland Reporter - (Washington) "Cyborg Bandit" caught, wanted 
for bank robberies in two counties, Kirkland. Police in Seattle arrested a man 
February 1 1 whom they believed to be both the 'Cyborg Bandit' and the 'Elephant Man 
Bandit' responsible for a combined 30 bank robberies in King and Snohomish counties. 
Source: http://www.kirklandreporter.com/news/245276211.html 

9. February 12, SC Magazine - (International) Gameover Zeus most active banking 
trojan in 2013, researchers report. Dell SecureWorks Counter Threat Unit released a 
report covering banking trojans in 2013 and found that the Gameover ZeuS trojan was 
the most actively observed trojan during the year, with 38 percent of activity, followed 
by the Citadel trojan at 33 percent of activity. 

Source: http://www.scmagazine.corn//gameover-zeus-most-active-banking-troian-in- 
2013-researchers-report/article/333795/ 

[ Return to top ] 

Transportation Systems Sector 

10. February 13, WCMH 4 Columbus - (Ohio) Crash, chemical spill closes S.R. 104 in 
Pickaway County. A portion of State Road 104 in Pickaway County remained closed 
February 13 after a semi-truck hit a guardrail, overturned, and spilled about 2,000 
gallons of ethanol into a nearby stream from its ruptured fuel tank February 12. The 
Ohio Environmental Protection Agency and Emergency Management Agency worked 
to contain the spill and begin the cleanup process. 

Source: http://www.nbc4i.com/storv/24706163/crash-closes-sr-104-in-pickawav- 
county 

11. February 13, NBC News- (Pennsylvania) Train derails in Pennsylvania amid heavy 
snow. Twenty-one Norfolk Southern Corp. rail cars carrying crude oil and propane 
derailed February 13, hitting a nearby steel plant in Vandergrift, Pennsylvania, forcing 
workers to evacuate the building. Officials are investigating the incident. 

Source: http://www.nbcnews.com/storyline/deep-freeze/train-derails-pennsvlvania- 
amid-heavy-snow-n2946 1 
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12. February 12, KYW-TV 3Philadelphia - (Pennsylvania) Worker burned during crane 
fire at Philadelphia shipyard; 2nd worker trapped. A worker was burned and a 
second was trapped when a fire broke out in a crane February 12 at the Aker Shipyard 
in Philadelphia. 

Source: http://philadelphia.cbslocal.com/2014/02/12/worker-burned-during-crane-fire- 
at-shipyard/ 

13. February 12, Los Angeles Times - (National) FBI cracks down on shining lasers at 
aircraft. A dozen FBI field offices across the U.S. will offer a $10,000 reward for the 
next 60 days for information leading to the arrest of any person known to be shining a 
laser at an aircraft due to the potential damage it can cause. 

Source: http://www.officer.com/news/11309571/fbi-cracks-down-on-shining-lasers-at- 
aircraft 

14. February 12, KXLF 4 Butte - (Montana; Idaho) Avalanche danger closes Highway 12 
at Montana/Idaho border. Highway 12 near the Montana/Idaho border was closed 
indefinitely February 12 by the Montana and Idaho Departments of Transportation due 
to the threat of avalanches. 

Source: http://www.kxlf.com/news/avalanche-danger-closes-highway-12-at-montana- 
idaho-border/ 

15. February 12, Spokane Spokesman-Review - (Washington) Many eastern Washington 
highways closed due to flooding. Sections of various highways across a number of 
counties in eastern Washington were closed by the State’s Department of 
Transportation February 12 due to flooding on the roadways. 

Source: http://www.spokesman.com/stories/2014/feb/12/numerous-highways-closed- 
due-flooding/ 

For another story, see item 1 
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Food and Agriculture Sector 

16. February 12, Lima News - (Ohio) Brief equipment fire pauses production at 

Rudolph Foods. Employees were evacuated for several hours after a pork rind dryer 
caught fire and fire spread through an exhaust vent on the roof of a Rudolph Foods 
food production facility in Westminster, Ohio, February 12. The building sustained no 
damage and operations resumed several hours later. 

Source: http://www.limaohio.com/news/news/759069/Brief-equipment-fire-pauses- 
production-at-Rudolph-Foods 

T Return to top i 

Water and Wastewater Systems Sector 

17. February 12, Astoria Daily Astorian - (Oregon) Power outage causes contaminated 



-5 - 



water sewage leak in Necanicum River. Approximately 125,000 gallons of 
contaminated water sewage leaked into the Necanicum River February 12 after a power 
outage prompted by a storm at Seaside’s water treatment plant. Officials believe the 
water will be diluted quickly due to heavy rainfall and the river’s high flow. 
Source: http://www.dail vastorian.com/free/power-outage-causes-contaminated-water- 
sewage-leak-in-necanicum-river/article 0ea6bc3a-943a- 1 1 e3 -b 1 a5-00 1 a4bcf8 87 a.html 

For another story, see item 10 
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Healthcare and Public Health Sector 

18. February 12, Ventura County Star - (California) Simi Valley tip leads to 5 arrests in 
pill mill case. Police arrested 5 individuals, including a doctor and 2 nurses, February 6 
in connection with operating a pill mill out of the San Fernando Valley. The 5-month 
investigation determined the individuals were operating out of Arleta Medical Clinic 
and selling prescriptions for pain pills and anti-anxiety drugs without doctors’ visits, 
valued at more than $5 million in estimated street value. 

Source: http://www.vcstar.com/news/2014/feb/12/5-arrested-in-connection- with- 
operating-pill-out/ 
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Government Facilities Sector 

19. February 12, WAVY 10 Portsmouth - (Virginia) Military Sealift Command worker 
pleads in bribery scheme. The U.S. Attorney’s Office reported that a civil employee 
with the U.S. Navy’s Military Sealift Command pleaded guilty February 12 to 
accepting thousands of dollars in bribes in exchange for directing subcontracting work 
to a certain company from March 2005 to May 2009. 

Source: http://www.nbcnews.com/id/54362152/ 

For another story, see item 1 

[ Return to top ] 

Emergency Services Sector 

20. February 11, Firehouse.com News - (New Jersey) N.J. ambulance bursts into flames 
while transporting patient. Two crew members were treated for smoke inhalation and 
a patient was removed and transported to an area hospital after a Budd Lake ambulance 
caught fire February 9 when flames came out of heating vents while out on an 
emergency call in New Jersey. 

Source: http://www.firehouse.eom/news/l 1309188/budd-lake-ambulance-catches-fire- 
all-ok 
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Information Technology Sector 

21. February 13, Softpedia - (International) Oracle confirms existence of 30 security 
holes in Java Cloud Service. Oracle confirmed the existence of 30 security 
vulnerabilities in its Java Cloud Service reported to the company by Security 
Explorations researchers. The researchers stated that over half can be exploited to 
bypass the Java security sandbox. 

Source: http://news.softpedia.com/news/Oracle-Confirms-Existence-of-30-Security- 
Holes-in-Java-Cloud-Service-426666.shtml 

22. February 13, V3.co.uk - (International) Android apps with Trojan SMS malware 
infect 300,000 devices, net crooks $6m. Researchers at Panda Labs identified a new 
Android trojan app campaign that uses fake permission notifications to get users' 
devices to send SMS messages to a premium-rate number owned by the attackers 
behind the trojan apps. The campaign has infected at least 300,000 devices and netted 
the attackers at least $6 million. 

Source: http://www.v3.co.uk/v3-uk/news/2328691/android-apps-with-troian-sms- 
malware-infect-300-000-devices-net-crooks-usd6m 

23. February 13, Help Net Security - (International) Linksys home routers targeted and 
compromised in active campaign. A security researcher reported that an unknown 
vulnerability is allowing Linksys El 000 routers to be targeted and infected with a worm 
dubbed TheMoon. The vulnerability is currently being heavily exploited in attacks. 
Source: http://www.net-securitv.org/malware news.php?id=2707 

24. February 13, Softpedia - (International) ASUS fixes vulnerabilities in RT-N66U, RT- 
N66R and RT-N66W routers. ASUS released firmware updates for three RT-N66 
model routers, closing five security issues. 

Source: http://news.softpedia.com/news/ASUS-Fixes-Vulnerabilities-in-RT-N66U-RT- 
N66R-and-RT-N66W-Routers-426689.shtml 

25. February 12, Threatpost - (International) US government delivers cybersecurity 
framework for critical infrastructure. The National Institute of Standards and 
Technology (NIST) announced February 12 that it has released the Framework for 
Improving Critical Infrastructure Security, a document which outlines cybersecurity 
practices and standards for industry and government to consider when developing 
security programs for critical infrastructure. 

Source: http://threatpost.com/us-government-delivers-cvbersecuritv-framework-for- 
critical-infrastructure/ 104243 

26. February 12, SC Magazine - (International) Pre-installed security software leaves 
computers vulnerable to remote hijack, experts reveal. Kaspersky Lab researchers 
released a report February 12 warning that the Absolute Computrace anti-theft software 
pre-installed on some desktops and laptops contains vulnerabilities which could allow 
attackers to remotely hijack systems. 
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Source: http://www.scmagazine.com/pre-installed-security-software-leaves-computers- 
vulnerable-to-remote-hiiack-experts-reveal/article/333808/ 

27. February 12, IDG News Service - (International) Denial-of-service vulnerability puts 
Apache Tomcat servers at risk. Researchers published a proof-of-concept exploit for 
a recently-disclosed vulnerability affecting Apache Tomcat servers that could allow 
attackers to execute denial-of-service (DoS) attacks against Web sites hosted on the 
servers. 

Source: http://www.networkworld.com/news/2014/Q21214-denial-of-service- 
vulnerability-puts-apache-tomcat-278708.html 

For another story, see item 9 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

28. February 13, Pittsburgh Post-Gazette - (Pennsylvania) Verizon fixes phone outages 
in parts of 412 area code. Verizon land-line service for 5,000 customers around 
Allegheny County with various area codes was restored after an outage that lasted more 
than 2 hours February 13. 

Source: http://www.post-gazette.com/local/region/2014/Q2/13/Verizon-fixes-phone- 
outages-in-parts-of-4 1 2-area-code/stories/20 1402 1 3027 6 
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Commercial Facilities Sector 

29. February 13, Associated Press - (International) FBI, Secret Service investigating 
Sands hacking. The FBI, U.S. Secret Service, and the Nevada State Gaming Control 
Board are investigating a cyberattack on the Las Vegas Sands casino company’s Web 
sites and email system. The company is working to determine whether systems may 
have been compromised in the attack that took the sites offline for more than a day. 
Source: http://www.nbc29.com/storv/24705154/las-vegas-sands-investigating- website- 
hacking 

30. February 13, Delaware News Journal - (Delaware) Marshallton apartment fire 
leaves 20 residents without a home. Investigators ruled that a child playing with a 
lighter started a Marshallton apartment fire that left 20 residents displaced and caused 
an estimated $150,000 in damage February 12. 
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Source: http://www.delawareonline.com/storv/news/local/2014/02/13/marshallton- 
apartment-fire-leaves-20-residents-without-a-home/5444135/ 

31. February 12, CNN - (Kentucky) Sinkhole swallows pricey Corvettes at hallowed 
museum. Eight historic cars collapsed into a 40-foot- wide by 20-foot-deep sinkhole 
that opened beneath the National Corvette Museum in Bowling Green February 12. The 
damaged part of the museum was closed indefinitely, while the rest of the facility 
reopened February 13. 

Source: http://www.cnn.com/2014/02/12/us/national-corvette-museum-cars-fall/ 

32. February 12, WFLA 8 Tampa - (Florida) Stuck roller coaster riders rescued at 
Busch Gardens. Tampa Fire Rescue rescued 16 passengers from the “Cheetah Hunt” 
roller coaster at Busch Gardens after it unexpectedly stalled mid-ride during a 
rainstorm February 12. Officials are investigating why a safety system may have 
triggered and forced the ride to stop. 

Source: http://www.wfla.com/storv/24707191/16-people-stuck-on-busch-gardens- 
roller-co aster 

33. February 12, Boston Globe - (Massachusetts) Fire destroys antiques store in 
Cohasset. Massachusetts fire officials are investigating a 3-alarm fire that engulfed the 
Reflections Antique Emporium in Cohasset February 12. 

Source: http://www.bostonglobe.com/metro/2014/02/12/firefighters-battle-alarm-blaze- 
cohasset/FhBHokBWNTlcHv3t40nSKP/story.html 

34. February 12, Associated Press - (Connecticut) Waterbury fires displace nearly 50 
people. Nearly 50 residents were displaced after a fire broke out in a Waterbury 
apartment building and condominium building February 1 1 . One firefighter was treated 
for minor injuries. 

Source: http ://w w w . theday . com/article/20 14021 2/NW SI 2/ 140219871/1 047 

35. February 12, KOTV 6 Tulsa - (Oklahoma) Investigation underway after fire 
destroys Tulsa office building. Authorities are investigating a fire that destroyed a 
Tulsa office building that housed the Petroleum Equipment Institute February 11. 
Source: http://www.newson6.com/story/24698830/tulsa-building-catches-fire- 
firefighters-removed-as-roof-collapses 

36. February 11, Los Angeles Times - (California) Damage estimate from strip mall fire 
totals $2.25 million. Authorities are investigating a 3-alarm fire that destroyed several 
businesses in a Gendale strip mall and caused about $2.25 million in damage February 
10 . 

Source: http://articles.glendalenewspress.com/2014-02-ll/opinion/tn-gnp-damage- 
estimate-from-strip-mall-fire-rises-to-225-million-2014021 1 1 strip-mall-fire-fire- 
crews-aggressive-fire 
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Dams Sector 



37. February 12, Bencl Bulletin - (Oregon) Utility to fix Bend’s Mirror Pond dam. 
PacifiCorp announced February 1 1 that it will repair the leak in Bend’s Mirror Pond 
dam in April and begin generating electricity after a wooden panel in the dam began 
leaking during October 2013, sinking the water level and causing electricity to be shut 
off. 

Source: http://www.bendbulletin.com/home/1780016-151/utilitv-to-fix-bends-rnirror- 
pond-dam# 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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